The January 2025 security update for Windows 11, version 24H2 expands the list of vulnerable drivers that could be used in Bring Your Own Vulnerable Driver attacks. BYOVD Vulnerabilities in kernel drivers could allow threat actors to sneak malware into the kernel.

Microsoft fixed over 150 vulnerabilities on Update Tuesday in January. These include 11 security vulnerabilities categorised as critical and several Windows vulnerabilities that are already being exploited for attacks.

These include patches for three actively exploited zero-days. In total, this Patch Tuesday fixes: 58 Remote Code Execution vulnerabilities, 40 Elevation of Privilege vulnerabilities, 24 Information Disclosure vulnerabilities, 20 Denial of Service vulnerabilities, 14 Security Feature Bypass vulnerabilities, and 5 Spoofing vulnerabilities.

All three zero-day vulnerabilities have a CVSS score of 7.8 and could allow an attacker to gain system privileges.